full-disclosure - Smae stupid little Zone Alarm Pro trick!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: chows at ozemail.com.au (Gregh)
Subject: Smae stupid little Zone Alarm Pro trick!

Zone Alarm Pro recently put out a patch update for a not-too-nice problem
and is now up to version 4.5.538.001.

For a couple of versions up until this update, it appeared their stupid
little trick was gone but wait for it, customers, IT'S BAAAACK!

What is the problem you ask?

Zone Alarm Pro has this little feature called "Automatic Lock". When you
activate it WHEN it is working correctly, after a set amount of time (set by
user or default of 10 minutes if not set by user) of keyboard/mouse
inactivity while connected to Internet, it cuts in and lets only previously
"ALLOWED" (by user) programs to work on the net, cutting all other programs'
access.

Unfortunately "Automatic Lock" used to cut access to everything, including
your lan, when activated, once upon a time but this was fixed a few versions
ago. More unfortunately, it is partially back again. After the preset amount
of inactivity, whether Automatic Lock is set on or off, it cuts off program
access to the net though at least does NOT cut you off from your lan this
time around.

Workaround: set the period of inactivity to 999 minutes or go and allow
every program to work through the lock. The latter option takes the most
time of course.

Let's hope they fix this one - AGAIN!

Greg.